v1.9.1 (2026-07-06)

Minor security release to address CVE-2026-35469

Chore

• Address CVE-2026-35469 (cherry-pick #4814 for 1.9) (#4824)
• deps: update google.golang.org/grpc. Fixes #4667 (#4686)

Ci

• pin k3s version to avoid breakage of e2e tests (#4644) (#4820)

Fix

• remove readinessProbe on rollout install (#4704)
• create isolated logger for redactor (#4703)
• controller: honor stderrthreshold when logtostderr is enabled (#4673)
• dashboard: guard null chartValue in metric chart tooltip. Fixes #4743 (#4744)
• deps: restore go 1.24.9 on release-1.9 after bad grpc cherry-pick
• trafficrouting: ensure early SetWeight runs after checkReplicasAvailable (#4639)

v1.10.0-rc1 (2026-06-30)

Build

• skip full CI for documentation only changes (#4737)
• Parameterized build system for company forks (#4605)
• Stop rendering gh-pages (#4583)

Chore

• Address CVE-2026-35469 (#4814)
• switch to *bool for clusterScope (#4551)
• update notification engine (#4715)
• don't use httpbin.org it's flaky (#4554)
• add OneSignal to USERS.md (#4765)
• add Code owners similar to Argo CD (#4628)
• Migrate to pnpm (#4699) (#4712)
• update expr version from v1.16.9 to v1.17.7 (#4588)
• update USERS.md to remove duplicates and fix numbering (#4620)
• support team workflows and Nats.io for notifications (#4625)
• deps: bump actions/cache from 4 to 5 (#4622)
• deps: bump golang to 1.26 (#4638)
• deps: update debian11 to debian12 (#4652)
• deps: bump actions/upload-artifact from 5 to 6 (#4601)
• deps: update dependencies to latest (#4659)
• deps: bump actions/setup-go from 6.0.0 to 6.1.0 (#4549)
• deps: update google.golang.org/grpc. Fixes #4667 (#4686)
• deps: bump actions/checkout from 5 to 6 (#4550)
• deps: migrate to go.yaml.in/yaml/v2 (#4683)
• deps: update dependencies for cves (#4801)
• deps: bump softprops/action-gh-release from 2.4.1 to 2.4.2 (#4530)
• deps: bump docker/setup-qemu-action from 3.6.0 to 3.7.0 (#4525)

Ci

• skip checks for documentation PR (#4816)
• Bring Cherry pick functionality from Argo CD (#4797)
• Speedup test timing with effective caching part 2 (#4714)
• upload unit and e2e coverage separately with Codecov flags (#4761)
• Speedup Go build timing with effective caching (#4702)
• pin pr-check version (#4685)
• Speed up ci by ignoring codeql for docs only change (#4641)
• pin k3s version to avoid breakage of e2e tests (#4644)
• test e2e against k8s 1.35 (#4636)
• Llm disclosure (#4627)

Docs

• Added roadmap (again) (#4811)
• minor spelling mistakes (#4781)
• explain how to run the UI locally from source (#4773)
• explain policy for plugins (#4738)
• fix broken Anti Affinity link on canary/bluegreen pages (#4700)
• clarify header based routing via plugins (#4708)
• add missing argoproj-labs plugins to metric and traffic-router lists (#4705)
• Updated workflows readme (#4640)
• add rollout secret change best practice (#4189)
• update rollout spec for incorrect attribute YAML (#4633)
• clarify basic canary options applicability. Fixes #1821 (#4649)
• Update Changelog (#4529)
• Add 'Netease Cloud Music' to USERS.md (#4594)
• mention managedFieldsManagers option of Argo CD for GitOps scenarios (#4586)
• clarify the v1alpha meaning for Rollouts (#4587)
• Add Procore to the list of users (#4577)
• cli: add mise alternative installation for kubectl plugin (#4532)
• controller: Resource Plugin Proposal (#4387)
• example: Update argo-rollouts docs url (#4599)

Feat

• metricprovider: make Datadog API request timeout configurable (#4812)

Feat!

• update default Traefik API group to v3 (#4572)

Fix

• allow plugins to implement ping-pong (and not just ALB/Istio) (#4740)
• bluegreen analysis prematurely succeeds if new ReplicaSet becomes unsaturated (#4604)
• update broken yarn.lock file (#4603)
• job with image pull error should not be marked as successful (#4602)
• preserve CRD field descriptions for kubectl explain (#4687)
• create isolated logger for redactor (#4703)
• remove header & mirror routes so rollout can complete. Fixes #2526 (#4307)
• remove readinessProbe on rollout install (#4704)
• allows plugins to implement traffic mirroring (and not just Istio) (#4643)
• Typo in VPA deployment description (#4669)
• leader lease name from instance id (#4768)
• incorrect evaluation of scale down delay on rollback (#4787)
• analysis: detect infrastructure errors early and mark job analysis as inconclusive (#4692)
• analysis: improve error messages for AnalysisRun metric evaluation failures. Fixes #2101 (#4680)
• controller: Use maxTrafficWeight instead of hardcoded 100 in checkReplicasAvailable. (#4646)
• controller: Always reconcile pod metadata (#4477)
• controller: Exit reconciliation early after in-flight Rollout writes (#4784)
• controller: Skip analysis runs if no templates are specified (#4544)
• controller: Cap minPodsPerReplicaSet to rollout spec replicas. Fixes #4566 (#4570)
• controller: ensure progress when canary > desired replicas (#4619)
• controller: honor stderrthreshold when logtostderr is enabled (#4673)
• controller: Requeue on stale informer cache instead of writeBackToInformer (#4786)
• controller: reduce memory by filtering ReplicaSet informer (#4666)
• controller: convert unstructured→typed to avoid memory bloat (#4745)
• dashboard: Show page size selector in table view (#4629)
• dashboard: avoid dialing 0.0.0.0 in newHTTPServer. Fi...

v1.9.0 (2026-03-19)

Chore

• deps: update debian11 to debian12 (#4652)

Fix

• bluegreen analysis prematurely succeeds if new ReplicaSet becomes unsaturated (#4604)
• controller: ensure progress when canary > desired replicas (#4619)
• controller: Use maxTrafficWeight instead of hardcoded 100 in checkReplicasAvailable. (#4646)
• controller: Always reconcile pod metadata (#4477)
• dashboard: avoid dialing 0.0.0.0 in newHTTPServer. Fixes #3931. (#4589)
• trafficrouting: ReplicaSetReferenced does not check istio DestinationRules (#4560)
• trafficrouting: ensure DestinationRule is updated before SetWeight on rollback (#4612)
• trafficrouting: cache RPC client to avoid 'Stdout already set' error. Fixes #3918 (#4613)
• trafficrouting: ensure early SetWeight runs after checkReplicasAvailable (#4639)
• trafficrouting: set weight before hash for new canary (#4564)

v1.9.0-rc2 (2025-11-18)

Chore

• switch to *bool for clusterScope (#4551)

Fix

• controller: Skip analysis runs if no templates are specified (#4544)

Revert

• PR #4074 (#4553)

v1.9.0-rc1 (2025-11-07)

Build

• tmate.io is no longer active (#4417)

Chore

• Change enhancement proposal issue wording (#4414)
• security fix https://nvd.nist.gov/vuln/detail/CVE-2023-46402 (#4083)
• Make sure rollouts abort always has some more detailed message (#3957) (#4175)
• bump k8s libraries and go to current supported versions (#4497)
• use internal errors util instead of pkg's (#4171)
• Add Verkada to the list of users (#4176)
• Add Doubble to official USERS.md (#4214)
• Fix Traefik name (#4217)
• enrich controller startup log with namespace, ports, and insta… (#4218)
• Improve logging (#4266)
• add canaryStepString route msg (#4490)
• fix deprecation (pointer -> ptr) (#4286)
• Adding Red Hat to the list (#4361)
• make api-proto to support go module style (#4402)
• Add UiPath to the list of users (#4476)
• deps: bump codecov/codecov-action from 5.3.1 to 5.4.0 (#4157)
• deps: bump softprops/action-gh-release from 2.2.2 to 2.4.1 (#4489)
• deps: bump amannn/action-semantic-pull-request from 5 to 6 (#4454)
• deps: bump sigstore/cosign-installer from 3.8.2 to 3.10.0 (#4448)
• deps: bump docker/login-action from 3.4.0 to 3.6.0 (#4473)
• deps: bump actions/download-artifact from 4.3.0 to 6.0.0 (#4512)
• deps: bump github.com/aws/smithy-go from 1.22.4 to 1.23.1 (#4494)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.45.1 to 1.45.4 (#4366)
• deps: bump golang.org/x/sync from 0.11.0 to 0.16.0 (#4353)
• deps: bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#4328)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.1 to 1.45.1 (#4313)
• deps: bump codecov/codecov-action from 5.4.2 to 5.4.3 (#4283)
• deps: bump docker/build-push-action from 6.16.0 to 6.18.0 (#4298)
• deps: bump actions/stale from 9 to 10 (#4493)
• deps: bump codecov/codecov-action from 5.4.3 to 5.5.1 (#4492)
• deps: bump softprops/action-gh-release from 2.2.1 to 2.2.2 (#4243)
• deps: bump actions/download-artifact from 4.2.1 to 4.3.0 (#4254)
• deps: bump docker/build-push-action from 6.15.0 to 6.16.0 (#4255)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.8 to 1.29.14 (#4230)
• deps: bump codecov/codecov-action from 5.4.0 to 5.4.2 (#4237)
• deps: bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#4247)
• deps: bump github.com/golang-jwt/jwt to 4.5.2 (#4235) (#4236)
• deps: bump google.golang.org/grpc from 1.70.0 to 1.71.1 (#4227)
• deps: bump golangci-lang from v1.61.0 to v1.64.8 (#4213)
• deps: bump google.golang.org/grpc from 1.68.1 to 1.69.0 (#4001)
• deps: bump golang.org/x/oauth2 from 0.26.0 to 0.29.0 (#4219)
• deps: bump actions/checkout from 4 to 5 (#4518)
• deps: bump actions/upload-artifact from 4 to 5 (#4519)
• deps: bump actions/setup-go from 5.3.0 to 5.4.0 (#4197)
• deps: bump actions/download-artifact from 4.2.0 to 4.2.1 (#4198)
• deps: bump docker/login-action from 3.3.0 to 3.4.0 (#4191)
• deps: bump actions/download-artifact from 4.1.9 to 4.2.0 (#4194)
• deps: Updated go version in go.mod file (#4182)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.0 to 1.44.1 (#4172)
• deps: bump github/codeql-action from 3 to 4 (#4517)
• deps: bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#4516)
• deps: bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#4152)
• deps: bump docker/setup-buildx-action from 3.9.0 to 3.10.0 (#4167)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.43.15 to 1.44.0 (#4169)
• deps: bump github.com/newrelic/newrelic-client-go/v2 from 2.53.0 to 2.54.0 (#4150)
• deps: bump actions/download-artifact from 4.1.8 to 4.1.9 (#4154)
• deps: bump actions/setup-go from 5.4.0 to 6.0.0 (#4436)
• deps: bump docker/build-push-action from 6.14.0 to 6.15.0 (#4158)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.6 to 1.29.8 (#4160)
  ...

What's Changed

• fix: bluegreen analysis prematurely succeeds if new ReplicaSet becomes unsaturated by @jessesuen in #4604
• chore(deps): bump github.com/hashicorp/go-plugin from 1.6.2 to 1.6.3 by @aali309 in #4592

Full Changelog: v1.8.3...v1.8.4

v1.9.0-rc3 (2025-11-26)

• Had to release a 1.9.0-rc3 due to release pipeline issues. No changes from RC2

v1.9.0-rc2 (2025-11-18)

Chore

• switch to *bool for clusterScope (#4551)

Fix

• controller: Skip analysis runs if no templates are specified (#4544)

Revert

• PR #4074 (#4553)

Full Changelog: v1.9.0-rc1...v1.9.0-rc3

BREAKING CHANGE

We reverted this breaking change it will not be in RC2 or the final release for 1.9

We are changing rollouts .status.selector field to report only the stable replicaset for traffic routed canaries that do not use dynamicStableScale. This is needed in order to be able to use HPA's reliably. A little explanation on how HPA. calculate desired pods. There are two methods and formulas for calculating desired pods counts we will be focusing on Value type metrics.

The formula for Value type metrics is as follows desiredReplicas = ceil[currentReplicas * ( currentMetricValue / desiredMetricValue )] The currentReplicas count comes from the selector defined in .status.selector for Argo Rollouts. Before we merge this PR this would be all pods under the Rollout (stable+canary). This causes issues because as we shift traffic to the desired state we end up with a whole bunch of pods not taking any traffic. In theory the number of pods taking traffic will always be equal to .spec.replicas which is also the same value as the stable replicaset, therefore we should report to the HPA the number of pods behind the stable replicaset as a proxy to .spec.replicas.

This change does have the possibility to affect your current HPA configurations. You should make sure that you understand the new behavior and that it works with your HPA's metrics. Chances are high that what you currently have configured is actually broken due to this issue.

Two examples before and after of the formula:

Before this PR

.spec.replicas = 10
setWeight = 50
desiredMetricValue = 50
currentMetricValue = 50
canaryPodCount = 5
stablePodCont = 10
 
desiredReplicas = ceil[currentReplicas * ( currentMetricValue / desiredMetricValue )]
15 = ceil[ (10 + 5) * ( 50 / 50) ]

Here we would want to scale up to 15 pods incorrectly.

After this PR

.spec.replicas = 10
setWeight = 50
desiredMetricValue = 50
currentMetricValue = 50
canaryPodCount = 5
stablePodCont = 10
 
desiredReplicas = ceil[currentReplicas * ( currentMetricValue / desiredMetricValue )]
10 = ceil[ (10) * ( 50 / 50) ]

Here we keep the pod count at 10 correctly.

This is a simplified example due to the dynamic nature of shifting weights during a rollout and metrics changing during those shifts. However, this new behavior is more correct and allows you to construct a metric that is more reliable.

There is also an assumption that all pods are taking traffic according to their weight. If you detach the number of pods from the weight by using setCanaryScale your risk affecting scaling again.

BREAKING CHANGE

We are changing the behavior of Rollouts .spec.selector to be immutable. This change matches the behavior of the Deployment kind which is a goal of the Rollouts kind to stay as close as possible to the Deployment resource. This change fixes issues and confusion when we abandon ReplicaSets if the selector is change. Going forward in order to change the selector you would have to delete the Rollout.

Upstream Reference: kubernetes/kubernetes#50808

fixes: #1761, #2105, #4070

Build

• tmate.io is no longer active (#4417)

Chore

• Change enhancement proposal issue wording (#4414)
• security fix https://nvd.nist.gov/vuln/detail/CVE-2023-46402 (#4083)
• Make sure rollouts abort always has some more detailed message (#3957) (#4175)
• bump k8s libraries and go to current supported versions (#4497)
• use internal errors util instead of pkg's (#4171)
• Add Verkada to the list of users (#4176)
• Add Doubble to official USERS.md (#4214)
• Fix Traefik name (#4217)
• enrich controller startup log with namespace, ports, and insta… (#4218)
• Improve logging (#4266)
• add canaryStepString route msg (#4490)
• fix deprecation (pointer -> ptr) (#4286)
• Adding Red Hat to the list (#4361)
• make api-proto to support go module style (#4402)
• Add UiPath to the list of users (#4476)
• deps: bump codecov/codecov-action from 5.3.1 to 5.4.0 (#4157)
• deps: bump github.com/aws/smithy-go from 1.22.2 to 1.22.3 (#4136)
• deps: bump amannn/action-semantic-pull-request from 5 to 6 (#4454)
• deps: bump sigstore/cosign-installer from 3.8.2 to 3.10.0 (#4448)
• deps: bump docker/login-action from 3.4.0 to 3.6.0 (#4473)
• deps: bump actions/download-artifact from 4.3.0 to 6.0.0 (#4512)
• deps: bump github.com/aws/smithy-go from 1.22.4 to 1.23.1 (#4494)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.45.1 to 1.45.4 (#4366)
• deps: bump golang.org/x/sync from 0.11.0 to 0.16.0 (#4353)
• deps: bump docker/setup-buildx-action from 3.10.0 to 3.11.1 (#4328)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.1 to 1.45.1 (#4313)
• deps: bump codecov/codecov-action from 5.4.2 to 5.4.3 (#4283)
• deps: bump docker/build-push-action from 6.16.0 to 6.18.0 (#4298)
• deps: bump actions/stale from 9 to 10 (#4493)
• deps: bump codecov/codecov-action from 5.4.3 to 5.5.1 (#4492)
• deps: bump softprops/action-gh-release from 2.2.1 to 2.2.2 (#4243)
• deps: bump actions/download-artifact from 4.2.1 to 4.3.0 (#4254)
• deps: bump docker/build-push-action from 6.15.0 to 6.16.0 (#4255)
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.29.8 to 1.29.14 (#4230)
• deps: bump codecov/codecov-action from 5.4.0 to 5.4.2 (#4237)
• deps: bump sigstore/cosign-installer from 3.8.1 to 3.8.2 (#4247)
• deps: bump github.com/golang-jwt/jwt to 4.5.2 (#4235) (#4236)
• deps: bump google.golang.org/grpc from 1.70.0 to 1.71.1 (#4227)
• deps: bump golangci-lang from v1.61.0 to v1.64.8 (#4213)
• deps: bump softprops/action-gh-release from 2.1.0 to 2.2.0 (#3999)
• deps: bump golang.org/x/oauth2 from 0.26.0 to 0.29.0 (#4219)
• deps: bump actions/checkout from 4 to 5 (#4518)
• deps: bump actions/upload-artifact from 4 to 5 (#4519)
• deps: bump actions/setup-go from 5.3.0 to 5.4.0 (#4197)
• deps: bump actions/download-artifact from 4.2.0 to 4.2.1 (#4198)
• deps: bump docker/login-action from 3.3.0 to 3.4.0 (#4191)
• deps: bump actions/download-artifact from 4.1.9 to 4.2.0 (#4194)
• deps: Updated go version in go.mod file (#4182)
• deps: bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.44.0 to 1.44.1 (#4172)
• deps: bump github/codeql-action from 3 to 4 (#4517)
• deps: bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#4516)
• deps: bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#4152)
• deps: bump docker/setup-buildx-action from 3....

What's Changed

Chore

• deps: bump github.com/golang-jwt/jwt to 4.5.2 (#4235) (#4236)
• deps: bump golang.org/x/oauth2 from 0.24.0 to 0.29.0 to fix CVE-2025-22868 (#4225)

Docs

• explain skew policy between the kubectl plugin and the controller (#4300)
• blue green w/ ALB not supported without downtime (#4259)

Fix

• abort scenario where canary/stable service is not provided (#4299)
• restarts during updates could cause downtime (#4221)
• experiments: fire rollout event on experiment step (#4124)
• trafficrouting: patch VirtualService when there is only one named route (#4055)

Full Changelog: v1.8.2...v1.8.3

Fix

• Revert "fix(controller): rollout stuck in Progressing. fixes #3988" (#4201)
• analysis: prevent promotion on inconclusive background run. Fixes: #3850 (#3873)

Full Changelog: v1.8.1...v1.8.2

Chore

• deps: Updated go version in go.mod file (#4182)

Docs

• new syntax for docs conf (#4012)

Fix

• guardrail to not overload stable replicaset (#3878)
• redo PR 3639 (#4114)
• check ephemeral metadata is set before delete (#4089)
• correct typo in linter settings key name (#4094)
• loop when paused and completed (#4134)
• nil pointer on logging (#4127)
• Upgrade go-retryablehttp to v0.7.7 (#3743)
• controller: rollout stuck in Progressing. fixes #3988 (#4072)
• dashboard: Revert react-scripts upgrade due to performance regression. Fixes #4122 (#4166)
• metricprovider: not require address in kubernetes secret for Datadog. Fixes #4103 (#4145)

Full Changelog: v1.8.0...v1.8.1

What's Changed

• chore: remove some k8s e2e test versions by @zachaller in #3495
• docs: Update Changelog by @github-actions in #3507
• chore(deps): bump codecov/codecov-action from 4.1.1 to 4.2.0 by @dependabot in #3500
• chore(deps): bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 by @dependabot in #3506
• chore(deps): bump github.com/prometheus/client_model from 0.6.0 to 0.6.1 by @dependabot in #3499
• chore(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.0 by @dependabot in #3497
• docs: Add technique for ConfigMap change detection in Rollout by @OpenGuidou in #3515
• chore(deps): bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #3514
• chore(deps): bump peaceiris/actions-gh-pages from 3 to 4 by @dependabot in #3513
• fix: Change indentation to properly render Markdown - fixes #3509 by @bmuschko in #3511
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.10 to 1.27.11 by @dependabot in #3510
• chore(deps): bump google.golang.org/grpc from 1.63.0 to 1.63.2 by @dependabot in #3512
• chore(deps): bump go version to 1.22 by @agaudreault in #3516
• chore(deps): bump codecov/codecov-action from 4.2.0 to 4.3.0 by @dependabot in #3517
• fix(controller): Corrects the logic of comparing sha256 has. Fixes #3519 by @dhawani in #3520
• docs: Add Amadeus to Users.md by @OpenGuidou in #3527
• chore(deps): bump slsa-framework/slsa-github-generator from 1.10.0 to 2.0.0 by @dependabot in #3537
• chore(deps): bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #3522
• chore(deps): bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #3540
• docs: provide recommendation for strategies by @kostis-codefresh in #3531
• feat(dashboard): change the color of the current rollout step by @alopezsanchez in #3526
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.37.0 to 1.38.0 by @dependabot in #3525
• chore(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in #3552
• chore(deps): bump codecov/codecov-action from 4.3.0 to 4.3.1 by @dependabot in #3550
• chore(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.0 by @dependabot in #3548
• chore: upgrade react-scripts by @rbreeze in #3584
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.11 to 1.27.16 by @dependabot in #3597
• chore(deps): bump codecov/codecov-action from 4.3.1 to 4.4.1 by @dependabot in #3588
• chore(deps): bump softprops/action-gh-release from 2.0.4 to 2.0.5 by @dependabot in #3561
• chore(deps): bump google.golang.org/protobuf from 1.34.0 to 1.34.1 by @dependabot in #3557
• chore(deps): bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #3556
• chore(deps): bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 by @dependabot in #3554
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 from 1.30.5 to 1.31.1 by @dependabot in #3608
• chore(deps): bump google.golang.org/grpc from 1.63.2 to 1.64.0 by @dependabot in #3607
• chore(deps): bump github.com/hashicorp/go-plugin from 1.6.0 to 1.6.1 by @dependabot in #3606
• chore(deps): bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #3604
• fix: Update loader-utils to 2.0.4 by @keithchong in #3601
• fix: rs conflict with fallback to patch by @zachaller in #3559
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.2 by @dependabot in #3621
• chore: add codecov token by @zachaller in #3623
• fix: verify the weight of the alb at the end of the rollout by @zachaller in #3627
• fix: when Rollout has pingpong and stable/canary service defined, only alb traffic management uses pingpong. by @mayzhang2000 in #3628
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2 from 1.31.1 to 1.31.3 by @dependabot in #3620
• fix: protocol missing in ambassador canary mapping creation. Fixes #3593 by @umjoshua in #3603
• chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 by @dependabot in #3631
• chore(deps): bump docker/build-push-action from 5.3.0 to 5.4.0 by @dependabot in #3624
• docs: Update Changelog by @github-actions in #3632
• chore(deps): bump codecov/codecov-action from 4.4.1 to 4.5.0 by @dependabot in #3634
• chore(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 by @dependabot in #3633
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.16 to 1.27.18 by @dependabot in #3625
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.38.0 to 1.38.6 by @dependabot in #3619
• fix: Add volume for plugin and tmp folder by @tommy351 in #3546
• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 by @dependabot in #3640
• chore: fix and add more cli usage case by @yyzxw in #3592
• fix: don't default datadog aggregator by @zachaller in #3643
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.38.6 to 1.38.7 by @dependabot in #3647
• chore(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #3644
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.19 by @dependabot in #3646
• chore: don't fail code-cov on failure by @zachaller in #3661
• chore(deps): bump docker/build-push-action from 6.0.0 to 6.0.2 by @dependabot in #3659
• fix: docs site version selector broken by @yyzxw in #3590
• chore(deps): bump docker/build-push-action from 6.0.2 to 6.1.0 by @dependabot in #3662
• docs: Update Changelog by @github-actions in #3666
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.19 to 1.27.22 by @dependabot in #3680
• chore(deps): bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #3676
• fix: add update verb to ClusterRole permissions for scaleDown feature. Fixes #3672 by @EnriqueTejeda in #3675
• fix(analysis): Take RollbackWindow into account when Reconciling Analysis Runs. Fixes #3669 by @Psukhe in #3670
• chore(deps): bump softprops/action-gh-release from 2.0.5 to 2.0.6 by @dependabot in #3656
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/cloudwatch from 1.38.7 to 1.40.1 by @dependabot in #3687
• chore(deps): bump github.com/aws/smithy-go from 1.20.2 to 1.20.3 by @dependabot in #3685
• chore: add example for updating all container images in set command by @EnriqueTejeda in #3667
• chore(deps): bump github.com/aws/aws-sdk-go-v2/config from 1.27.22 to 1.27.23 by @dependabot in #3695
• chore(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 by @dependabot in #3694
• chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in https://github.com/argoproj/argo-ro...